rapid7 / iotseeker Goto Github PK

Hi,
As per the given command to run "iotScnner.pl" i am getting following issue.
running it on kali VM

root@Curosity:~/IoTSeeker# perl iotScanner.pl 1.23.123.431 Can't locate AnyEvent/HTTP.pm in @inc (you may need to install the AnyEvent::HTTP module) (@inc contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.28.1 /usr/local/share/perl/5.28.1 /usr/lib/x86_64-linux-gnu/perl5/5.28 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.28 /usr/share/perl/5.28 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at iotScanner.pl line 1. BEGIN failed--compilation aborted at iotScanner.pl line 1.

I have also run the command "cpan AnyEvent::HTTP Data::Dumper JSON"

Please help in resolving it.

Thanks

I'm hoping to get some help over here...

I have everything installed, once I run the tool it tells me every IP in my range "failed to establish TCP connection". any thoughts? This is through my Mac and my linux distros.

Thanks

This is the error i get.
"unexpected status code 599 for ip 192.168.43.197"
Can someone help me out with this.
cheers

Hi,

While using IoTSeeker to scan for devices with default credentials on our
network we noticed that while IoTSeeker does work with basic auth but when
using forms it appears to not set the content-type HTTP header. IoTSeeker
then responds with 'default password was found' regardless of the
credentials passed to it from some devices such as AMX devices.

Using Wireshark we can see that IoTSeeker does not set the content-type
header and form variables are not set in the server response.

Using Wireshark with curl we confirmed that the content-type header is
(automatically) set and form variables are correctly set in the server
response.

I may have missed something in the devices.cfg?

"AMX":{
"devTypePattern": [["header", "server"], ["regex", "^The Knopflerfish"]],
"nextUrl": ["string", "/web/root/login.xml"],
"auth": ["form","", "userName=administrator&password=password", "body",
"!substr", "Invalid user name or password"]
},

Kind regards,
Elliott